Privacy Policy

About PostFlight

This is the privacy policy for the PostFlight mobile app, web app, and the postflight.com website. PostFlight is built by PostFlight Ltd, a company registered in England.

What we collect when you create an account

Email, name, license type and number, optional academy affiliation. Pilots provide these knowingly to use the product.

Flight and logbook data

Stored on our PostgreSQL backend, encrypted at rest. A local encrypted SQLite cache lives on your device so the app works offline. You can export and delete your data at any time from inside the app or by request.

ADS-B verification

When a flight is logged, we query FlightAware AeroAPI with flight metadata (registration, route, times) to cross-reference against radar data. No personal information is sent to FlightAware.

Payments

Subscriptions are processed through Adapty (App Store / Google Play) and Stripe (web and Academy partners). We don’t store full card details.

Waitlist

If you join the Founding 500 waitlist, your email is stored by Mailerlite for the purpose of contacting you about launch. You can unsubscribe at any time from any email we send.

Third parties

FlightAware AeroAPI (verification), Adapty / Stripe (payments), Mailerlite (waitlist email), Google Cloud (hosting infrastructure). No advertising SDKs. No third-party analytics on the marketing website.

Children’s data

PostFlight is intended for licensed pilots and student pilots aged 16 and over. We do not knowingly collect data from anyone under 16.

Your rights

Under UK GDPR you can access, correct, export, or delete your data, and object to processing. Email dpo@postflight.com.

Changes

If this policy changes, we’ll update the date at the top and notify active subscribers by email if the change is material.

Contact

dpo@postflight.com for data requests, hello@postflight.com for everything else. PostFlight Ltd, registered in England.